Prevent users to access some websites

I have some users who are watching videos all the time from internet. They do radio broadcasting, go to youtube. Can you provide an easy way to block these users to those websites with a central managment. I don't want to go to all the machines to block those websites. When they watch videos from internet, they use almost the bandwith and the provider slow down the signal for a certain period of time, so my internet is always slow. I am thinking to install a proxy server but do you have a solution for that.

Find more posts tagged with

Comments

ladiesman217

websense

the_erickee

ladiesman217 wrote:

websense

It works great. We use it up here.

undomiel

You could use Dan's Guardian with a squid proxy server.

http://dansguardian.org/

Diminutive

You could add an entry to DNS directing them to a work productivity site.

ronpasa69

Diminutive wrote:

You could add an entry to DNS directing them to a work productivity site.

hehehe, I like this suggestion the best. This would really trip them out. MAYBE THEN THEY WOULD GET THE MESSGAE.

astorrs

ladiesman217 wrote:

websense

+1 especially now that they bought SurfControl, they totally own that market...

bjaxx

astorrs wrote:

ladiesman217 wrote:

websense

+1 especially now that they bought SurfControl, they totally own that market...

What type of firewall do you have? you probably have it built in and don't know it.

arwes

astorrs wrote:

ladiesman217 wrote:

websense

+1 especially now that they bought SurfControl, they totally own that market...

Wow shows how long it's been since I kept up with that stuff. I didn't know that happened!

We just use the proxy server that's built into the routers we use (MikroTik). It's really barebones stuff, but we've got most of the blogging & social networking sites blocked so it's doing what we want for right now.

bwcarty

Changing your DNS is quick, easy, free, and potentially fun, but it only works if you know where people are going. If you need more control and less hands on administration, look into Websense.

royal

+1 for Websense.

Tontonsam

Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?

astorrs

Tontonsam wrote:

Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?

I'm assuming you have less than 250 users, as such Websense Express would be your best bet.

http://www.websense.com/docs/datasheets/en/Websense_Express.pdf

Tontonsam

Í prefer this by Websense Enterprise. But I am not involved in DNS yet and I am very excited to book my 70-290 exam to study the 291 that look in DNS. But, if I want to resolve this problem with DNS entry, how can I do that? I will try the Websense and will let u know the level of satisfaction.

sprkymrk

Tontonsam wrote:

But, if I want to resolve this problem with DNS entry, how can I do that?

Simply create an A record on your DNS server for whatever site you want to restrict, then put in a bogus address like 0.0.0.0 or the address of your company home page.

ladiesman217

Tontonsam wrote:

Ok, I will try websense but how it works. Do I need to install it to my PDC server and no action on client machines?

I found this one.

http://www.websense.com/docs/support/documentation/setup/v61/WebsenseDeploymentGuide.pdf

Tontonsam

Websense is very awesome even though I see today it s not very working. When I click to server\download, it says payment overdue. But it is a very good software. Anyway, I tried to block yahoo.com in the dns level. In the forward lookup zones, I right click/ New host (A). In the name, I typed yahoo.com and let the ip address to 0.0.0.0. But it s not working. Can you explicitly provide the steps for blocking yahoo site for example.

meadIT

You would also have to clear your local cache by running

ipconfig /flushdns

When you type in yahoo.com, your pc will look in your local cache first. If it's not in there, then it will query your DNS server.

Tontonsam

This command doesn't resolve anything. Could you provide the steps, maybe I do something wrong?

rbutturini

Websense is very good, and Cymphonix is also good, albeit pricey. You may even be able to get a version of websense that integrates with your firewall.

astorrs

Tontonsam wrote:

In the forward lookup zones, I right click/ New host (A). In the name, I typed yahoo.com and let the ip address to 0.0.0.0.

You would want to create a new forward lookup zone for yahoo.com; putting it inside your existing one (say company.com) and creating the host record as you described would create a host called "yahoo.com.company.com".

Tontonsam

It works but I'd like in the future to describe the steps cause I was thinking that I am a foolish guy.

But I remark that I have to create a primary zone for all the sites I want to block, can I put them in a one container or one primary zone? Now, I am ok with the sites, how can now I block some messenger like ovoo, yahoo, skype with their ports?